Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
149s -
max time network
154s -
platform
windows10-2004_x64 -
resource
win10v2004-20230915-en -
resource tags
-
submitted
02/10/2023, 22:44
General
-
Target
4968-662-0x0000000003780000-0x00000000038B1000-memory.dll
-
Size
1.2MB
-
MD5
4ce9edda6f8390ab7cfeb3745edf323c
-
SHA1
8282b41ab603073323498219dfb339b58b9d499c
-
SHA256
509888aee1f5f6a7a22ab2f35a21e420ea6ce2f80154673cab3c06b28e8504cc
-
SHA512
41b8312e9ab4cf81466951703bee0fced8179dcca1c7347a9ff8487fc964940c75655a7ab868c9bf78bd3187e2f5c3fcfc85084bd14602d80205ef0c5d67170a
-
SSDEEP
24576:3C7CI9TZDEWk1wCy0zaG9cQA31ftxmbfYQJZKDzp:7I99DEWVtQA3Zmn0n
Score
1/10
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\4968-662-0x0000000003780000-0x00000000038B1000-memory.dll,#11⤵
-
C:\Windows\system32\rundll32.exe"C:\Windows\system32\rundll32.exe" "C:\Windows\SYSTEM32\EDGEHTML.dll",#141 Microsoft.VCLibs.140.00_8wekyb3d8bbwe1⤵
-
C:\Windows\System32\svchost.exeC:\Windows\System32\svchost.exe -k UnistackSvcGroup1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB